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Receive host local address, first address domain identifier, and 
second address domain identifier 
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Select unique global address from a pool of global addresses 
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Create a source address translation table entry in the 
first address domain's source address translation table 
mapping the host local address in the first address domain 
to the selected global address for the second address domain 
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Create a corresponding destination address translation table entry 
mapping the selected global address to the host local address 
in the first address domain 
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Receive a domain name resolution request message 
including a destination host domain name 
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Send a domain name resolution request message to a local DNS Server 
in the destination address domain including the destination host domain name 
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Receive from the local DNS Server in the destination address domain 
a domain name resolution response message including a destination host local address 
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Send a translation request message to a network address translator including 
a source address domain identifier, the' destination host local address, 
and a destination address domain identifier 
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Receive a translation response message from the network address translator including 

a destination host global address 



Sending a domain name resolution response message 
including the destination host global address 
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Receive a translation request message including 
a source address domain identifier, a destination host local address, 
and a destination address domain identifer 
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Search address translation entries for an address translation entry 
mapping the destination host local address in the destination address domain 
to a unique destination host global address for the source address domain 




Select a unique destination host global address from the pool of global addresses 
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Create a source address translation table entry in the 
destination address domain's source address translation table 
mapping the destination host local address in the destination address domain 
to the destination host global address for the source address domain 



Create a corresponding destination address translation table entry I I n l f& 

k mapping the destination host global address to the destination host local address * 
in the destination address domain 



Send a translation response message including the destination host global address 
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Receive packet including a source address equal to 

a source host local address and a destination 
address equal to a destination host global address 



Determine whether the destination address requires translation 
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Translate the destination address from the unique destination host global address 
to the destination host local address in the destination address domain 



Determine whether the source address requires translation 
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Translate the source address from the overlapping source host local address to a 
unique source host global address for the destination (outbound) domain based 
upon the source (inbound) domain and the destination (outbound) domain 



Forward the packet to a destination (outbound) domain 
based upon the destination address 
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Search destination address translation table for a destination 
address translation table entry mapping the destination host 
global address to a corresponding destination host local address 
in the destination address domain 
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Determine source (inbound) domain for the packet 



Determine destination (outbound) domain for the packet 
based upon the destination address 
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Select a source address translation table for the 
source (inbound) address domain based upon the . 
source (inbound) address domain for the packet 1 
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Search source address translation table for a source 
address translation table entry mapping the source host local address 
in the source (inbound) address domain to a corresponding source host 
global address for the destination (outbound) address domain 




Select a unique source host global address from the pool of global addresses 



Create a source address translation table entry in the source address 
domain's source address translation table mapping the source host 
local address in the source address domain to the source host global 
address for the destination address domain 



Create a corresponding destination address translation table entry 
mapping the source host global address to the source host local address 
in the source address domain 
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Translate the source address in the packet from the source host local address 
into the source host global address for the destination address domain 
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Wellfleet-NAT-MIB DEFINITIONS ::= BEGIN 



IMPORTS 

IpAddress, Counter, Gauge 

FROM RFC1155-SMI 
OBJECT-TYPE 

FROM RFC-1212 
DisplayString 

FROM RFC1213-MIB 
wfNatGroup 

FROM Wellfleet-COMMON-MIB; 

wfNatlfTable OBJECT-TYPE 

SYNTAX SEQUENCE OF WfNatlfEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"The set of interface that are participating 

in the NAT protocol.'" 
::= { wfNatGroup 6 } 

WfNatlfEntry OBJECT-TYPE 
SYNTAX WfNatlfEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"'An single instance of a NAT interface entry. 
INDEX { wfNatlflpAddress, 

wfNatlfCircuit } 
::={ wfNatlfTable 1 } 




WfNatlfEntry ::= SEQUENCE { 
wfNatlfDelete 

INTEGER, 
wfNatlfDisable 

INTEGER, 
wfNatlflpAddress 

IpAddress, 
wfNatlf Circuit 
INTEGER, 
wfNatlfType 
INTEGER, 
wfNatlfState 
INTEGER, 
wfNatlfTxCount 

Counter, 
wfNatlfRxCount 

Counter, 
wfNatlfPktDropCount 

Counter, 
wfNatlfDomain 
DisplayString 

} 

wfNatifDelete OBJECT-TYPE 
SYNTAX INTEGER { 
created(1), 
deleted(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This variable determines in a NAT Interface has been 

configured on the router." 
DEFVAL { created } 
::= { WfNatlfEntry 1 } 

wfNatlfDisable OBJECT-TYPE 
SYNTAX INTEGER { 
enabled(1), 
disabled(2) 

} 

ACCESS read-write 

STATUS mandatory 

DESCRIPTION 

"The NAT interface's administrative status. The value 
'enabled' denotes that NAT has been configured 
on the interface. The value 'disabled' denotes that 
the interface is not running NAT.'" 

DEFVAL { enabled } 

::={ WfNatlfEntry 2} 




ch 



wfNatlflpAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The IP address of this NAT interface." 
::={wfNatifEntry3} 

wfNatlfCircuit OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The circuit number of this interface." 
::= { wfNatlfEntry 4 } 

wfNatifType OBJECT-TYPE 
SYNTAX INTEGER { 
uniDirlnbound(l), 
uniDirOutbound(2), 
biDirectional(3) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Denotes the type of NAT interface being defined." 
DEFVAL{ uniDirlnbound } 
::= { wfNatlfEntry 5 } 

wfNatlf State OBJECT-TYPE 
SYNTAX INTEGER { 

up(D, 

down(2), 

init(3) 

} 

ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The state of NAT on this interface'" 
DEFVAL { down } 
::= {wfNatlfEntry 6 } 

wfNatlfTxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets mapped over this interface from 

the local to the global network.'" 
::= { wfNatlfEntry 7 } 





wfNatlf RxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets mapped over this interface from 
the global to the local network." 1 
::={ wfNatlf Entry 8} 

wfNatlfPktDropCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets dropped on this interface" 
::= { wfNatlfEntry 9 } 

wfNatlfDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"When wfNatlfType is set to bi Directional, specifies 
the Address Domain Name that this interface is 
connected to, otherwise set to null." 
::={ wfNatlfEntry 10} 



wfNatAddressRangeTable OBJECT-TYPE 

SYNTAX SEQUENCE OF WfNatAddressRangeEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"Table of address ranges. " 
::= { wfNatGroup 8 } 

WfNatAddressRangeEntry OBJECT-TYPE 
SYNTAX WfNatAddressRangeEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"Information describing each of the available address ranges." 
INDEX { wfNatAddressRangeAddress, 
wfNatAddressRangePrefixLen, 
wfNatAddressRangelndex} 
::= { wfNatAddressRangeTable 1 } 

WfNatAddressRangeEntry ::= SEQUENCE { 
wfNatAddressRangeDelete 

INTEGER, 
wfNatAddressRangeDisable 

INTEGER, 
wfNatAddressRangeAddress 

IpAddress, 
wfNatAddressRangePrefixLen 

INTEGER, 
wfNatAddressRangelndex 

INTEGER, 
wf NatAddressRangeNtol Addr 

IpAddress, 
wfNatAddressRangeType 

INTEGER, 
wfNatAddressRangeDomain 

DisplayString, 
wfNatAddressRangeTransPool 

INTEGER, 
wfNatAddressRangeStaticNextHop 

IpAddress, 
wfNatAddressRangeUnnumCct 

INTEGER 





wfNatAddressRangeDelete OBJECT-TYPE 
SYNTAX INTEGER { 
created(1), 
de!eted(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Create/Delete parameter. Default is created. Users perform 
a set operation on this object in order to create/delete 
an address range entry." 
DEFVAL {created} 

{ wfNatAddressRangeEntry 1 } 

wfNatAddressRangeDisable OBJECT-TYPE 
SYNTAX INTEGER { 
enabled(1), 
disabled(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Enable/Disable parameter. Default is enabled. Users perform 
a set operation on this object in order to enable/disable 
an address range entry." 

DEFVAL { enabled } 

::= { wfNatAddressRangeEntry 2 } 

wfNatAddress Range Address OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The IP beginning address of this range entry." 
::= { wfNatAddressRangeEntry 3 } 

wfNatAddressRangePrefixLen OBJECT-TYPE 
SYNTAX INTEGER (1 .. 32) 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The number of contiguous bits set in the IP address mask 

which are used to define the address range of the entry." 
::= { WfNatAddressRangeEntry 4 } 

wfNatAddressRangelndex OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"A unique value for this entry in wf NatAddressRangeTable." 
::= { WfNatAddressRangeEntry 5 } 




wf NatAddressRangeNtol Addr OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"When wf NatAddressRangeType is set to srcAddrFilter, 
specifies the N-to-1 translation address used for 
this range, otherwise set to zero." 
DEFVAL { 0 } 

::= { wfNatAddressRangeEntry 6 } 

wf NatAddressRangeType OBJECT-TYPE 
SYNTAX INTEGER { 

sourceAddrFilter(1 ), 
translation Pool (2), 
domainSrcAddrFi!ter(3) , 
domainTransPool(4) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Denotes the type of address range being defined. 
sourceAddrFilter: a range of IP addresses used to detect packets 

which need traditional NAT forwarding, 
translation Pool: for traditional NAT forwarding, a range of 

IP addresses from which translation addresses are picked, 
domains rcAddrFilter: a range of IP addresses used to detect domain 

specific packets which need domain specific NAT forwarding. 
domainTransPool: for domain specific NAT forwarding, a range of 
IP addresses from which domain specific translation addresses 
are picked." 
DEFVAL{ sourceAddrFilter } 
::= { wfNatAddressRangeEntry 7 } 

wfNatAddressRange Domain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"When wf NatAddressRangeType is set to domainSrcAddrFilter or 

domainTransPool, specifies the Address Domain Name that this 
address range is valid for, otherwise set to null." 
::= { wfNatAddressRangeEntry 8 } 



wfNatAddressRangeTransPool OBJECT-TYPE 
SYNTAX INTEGER { 
inbound(1), 
outbound(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This attribute is only valid for the wf NatAddressRangeType as 

domainSrcAddrFilter(3). The value of this attribute decides 
where to get the translation address for this range from. 
This could be either the translation Pool defined for the 
inbound domain or the outbound domain for the packet in 
question." 
DEFVAL{ outbound } 

{ wfNatAddressRangeEntry 9 } 

wfNatAddressRangeStaticNextHop OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The IP address of the next hop of this range entry." 
DEFVAL{ 0 } 

::= { wfNatAddressRangeEntry 10 } 

wfNatAddress Range Unn urn Cct OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This Nat Address range over the unnumbered interface." 
DEFVAL{ 0 } 

::= { wfNatAddressRangeEntry 1 1 } 




wfNatStaticMappingTable OBJECT-TYPE 

SYNTAX SEQUENCE OF WfNatStaticMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"'This table creates instances of pre-defined NAT translations. 
::= { wfNatGroup 9 } 

WfNatStaticMappingEntry OBJECT-TYPE 
SYNTAX WfNatStaticMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"A single original source address to translated address 



INDEX { wfNatStaticMappingTransAddress, 
wfNatStaticMappingProtocol, 
wfNatStaticMappingTransPort } 

::= { wfNatStaticMappingTable 1 } 



WfNatStaticMappingEntry ::= SEQUENCE { 
wfNatStaticMapping Delete 

INTEGER, 
wfNatStaticMappingDisable 

INTEGER, 
wfNatStaticMappingOrigAddress 

IpAddress, 
wfNatStaticMappingTransAddress 

IpAddress, 
wfNatStaticMappingProtocol 

INTEGER, 
wfNatStaticMappingOrigPort 

INTEGER, 
wfNatStaticMappingTransPort 

INTEGER, 
wfNatStaticMappinglnDomain 

DisplayString, 
wfNatStaticMappingOutDomain 

DisplayString, 
wfNatStaticMappingStaticNextHop 

IpAddress, 
wfNatStaticMappingUnnumCct 

INTEGER 



translation." 



} 




wfNatStaticMappingDelete OBJECT-TYPE 
SYNTAX INTEGER { 
created(1), 
deleted(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Create/Delete parameter. Default is created. Users perform a set 
operation on this object in order to create/delete a static 
address translation entry." 

DEFVAL {created} 

::= { wfNatStaticMappingEntry 1 } 

wfNatStaticMappingDisable OBJECT-TYPE 
SYNTAX INTEGER { 
enabled(1), 
disabled(2) 

} 

ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"Enable/Disable parameter. Default is enabled. Users perform a 

set operation on this object in order to enable/disable a static 
address translation entry." 

DEFVAL { enabled } 

::= { wfNatStaticMappingEntry 2 } 

wfNatStaticMappingOrigAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The original (un-translated) address of the translation." 
::= { wfNatStaticMappingEntry 3 } 

wfNatStaticMappingTransAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The translated address of the translation/ 
::= { wfNatStaticMappingEntry 4 } 

wfNatStaticMappingProtocol OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The IP protocol of the translation. Example values are 
6 for TCP, and 1 7 for UDP." 
::= { wfNatStaticMappingEntry 5 } 



wfNatStaticMappingOrigPort OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The original (domain specific) UDP or TCP port of the 

translation. This will only be relevent if the protocol 
is either UDP or TCP." 
::= { wfNatStaticMappingEntry 6 } 

wfNatStaticMappingTransPort OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The translated UDP or TCP port of the translation. This will 
only be relevent if the protocol is either UDP or TCP." 
::= { wfNatStaticMappingEntry 7 } 

wfNatStaticMappinglnDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This attribute specifies the name of the address domain that this 
source translation shall be valid for. In other words, this 
translation shall only be valid for source addresses coming 
inbound from this domain." 
DEFVAL { "private" } 
::= { wfNatStaticMappingEntry 8 } 

wfNatStaticMappingOutDomain OBJECT-TYPE 

SYNTAX DisplayString 

ACCESS read-write 

STATUS mandatory 

DESCRIPTION 

"This attribute specifies the name of the outbound address 
domain that this translation will be valid for. In other words, 
this translation only applies to translations that will be 
forwarded out into this address domain." 
DEFVAL { "public" } 

::= { wfNatStaticMappingEntry 9} 

wfNatStaticMappingStaticNextHop OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"The IP address of the next hop of this static entry." 
DEFVAL{ 0 } 

:;= { wfNatStaticMappingEntry 10 } 



wfNatStaticMappingUnnumCct OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-write 
STATUS mandatory 
DESCRIPTION 

"This Nat static translation over the unnumbered interface." 
DEFVAL{ 0 } 

::= { wfNatStaticMapping Entry 1 1 } 





wfNatMappingTable OBJECT-TYPE 

SYNTAX SEQUENCE OF WfNatMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"This table defines the current set of address translations 
that are in effect." 
{ wfNatGroup 10 } 

WfNatMappingEntry OBJECT-TYPE 
SYNTAX WfNatMappingEntry 
ACCESS not-accessible 
STATUS mandatory 
DESCRIPTION 

"A single original source address to translated address 
translation." 
INDEX { wfNatMappingTrans Address, 
wfNatMapping Protocol, 
wfNatMappingTransPort } 
::= { wfNatMappingTable 1 } 

WfNatMappingEntry ::= SEQUENCE { 
wfNatMappingOrigAddress 

IpAddress, 
wfNatMappingTransAddress 

IpAddress, 
wfNatMappingProtocol 

INTEGER, 
wfNatMappingOrigPort 

INTEGER, 
wfNatMappingTransPort 

INTEGER, 
wfNatMappingTxCount 

Counter, 
wfNatMappingRxCount 

Counter, 
wfNatMappingTimeout 

Counter, 
wfNatMappingMode 

INTEGER, 
wfNatMappinglnDomain 

DisplayString, 
wfNatMappingOutDomain 
DisplayString 

} 

WfNatMappingOrigAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The original (un-translated) address of the translation." 
{ WfNatMappingEntry 1 } 
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wfNatMappingTransAddress OBJECT-TYPE 
SYNTAX IpAddress 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The translated address of the translation." 
::= { wfNatMappingEntry 2 } 

wfNatMappingProtocol OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"'The IP protocol of the translation.'" 
::= { wfNatMappingEntry 3 } 

wfNatMappingOrigPort OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"When the translation is for a TCP connection, this denotes 
the original TCP port number." 
::= { wfNatMappingEntry 4 } 

wfNatMappingTransPort OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"When the translation is for a TCP connection, this denotes 
the translated TCP port number." 
::= { wfNatMappingEntry 5 } 

wfNatMappingTxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets forwarded by NAT using this translation. 
::= { wfNatMappingEntry 6 } 

wfNatMappingRxCount OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"Number of packets received by NAT using this translation." 
::= { wfNatMappingEntry 7 } 



• t 

wfNatMappingTimeout OBJECT-TYPE 
SYNTAX Counter 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"The time in seconds since this translation entry was last used. 
This is used to age out translation entries.'' 
::= { wfNatMappingEntry 8 } 

wfNatMappingMode OBJECT-TYPE 
SYNTAX INTEGER 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"This is the bit mask representing the type of this translation. 
Each bit specifies the type as follows: 

The translation could be only ONE of the following three... 

0x01000000 - This translation is origianted on this router, 

i.e. this NAT router performed the translation. 

0x02000000 - This translation is learned from the peer, 

i.e. this translation was learned from the 
peer using NAT Synchronization feature. 

0x04000000 - This translation is owned, 

i.e. it was originally learned from peer, but 
this router received traffic which used this 
translation. 

...and only ONE of the following three. 

0x0000001 0 - This translation is the STATIC translation. 

0x00000020 - This translation is Dynamic(1 to 1) translation. 

0x00000040 - This translation is N to 1 translation." 
DEFVAL { 0 } 
::= { wfNatMappingEntry 9 } 

wfNatMappinglnDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 

"This attribute specifies the name of the address domain that this 
source translation shall be valid for. In ther words, this 
translation shall only be valid for source addresses coming 
inbound from this domain." 
::= { wfNatMappingEntry 10 } 





wfNatMappingOutDomain OBJECT-TYPE 
SYNTAX DisplayString 
ACCESS read-only 
STATUS mandatory 
DESCRIPTION 



"This attribute specifies the name of the outbound address domain 
that this translation will be valid for. In other words, this 
translation only applies to translations that will be forwarded 
out into this address domain." 



::= { wfNatMappingEntry 11} 



END « Wellfleet-NPT-MIB 




